How do I connect my identity provider to Identity for AI Agents? – Twilio Support

Objective

This article shows you how to configure the JWT profile that lets Identity for AI Agents validate tokens issued by your existing user management system, so your own authentication stack stays the source of truth for who your users are.

Product

Identity for AI Agents

Environment

Twilio Console

Procedure

In the Twilio Console, select Identity & security in the left sidebar.
Select Identity for AI Agents, then Configure.
Select the Identity Provider tab.
In the JWT Profile Configuration section, select Configure if you have not set this up before, or Edit to change existing values.
In the Configure JWT Profile panel, fill in:
Issuer (iss), the identifier for your existing user management system, expected as the iss claim in the JWT.
Audience (aud), the identifier for your agent identity system, expected as the aud claim in the JWT.
Authentication URL, the location in your user management system where unauthenticated users are redirected to sign in.
Copy the Callback URL shown in the panel and configure your user management system to redirect there after authentication. This value is computed for you and cannot be edited.
Use the Example JWT shown alongside the form as a reference for the claims your token must carry. It updates live as you type your issuer and audience.
Select Save changes.
A confirmation appears and the section shows your saved values.

Additional Information

Issuer (iss), Audience (aud), and Authentication URL are all required, and the authentication URL must be a valid URL.

Your Authentication Domain is shown at the top of the Configure page and can be copied from there.

Once the JWT profile is saved, add the public keys that Twilio will use to verify the token signature, see the related article on adding a public key.

If the page reports that it cannot load your identity provider settings, reload it rather than re-entering values. Saving replaces the whole configuration, so saving from a page that failed to load could overwrite your live settings.

This content was generated by AI and reviewed, edited, and verified by a human.